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Abstract 


Recent research has demonstrated electronic hard- 
ware attacks on pacemakers and insulin injectors. 
Injecting clock glitches can skip cryptographic instruc- 
tions, defeating the security of the executing instruc- 
tions. Typically, these attacks destabilize the dynamical 
behavior of the electronics. 

For over 70 years, flip-flops have been a fundamental 
building block of digital computers. Our primary contri- 
bution applies self-modifiable differential equations to 
a D flip-flop model. In particular, meta operators can 
dynamically self-modify the flip-flop differential equa- 
tions so that a noise attack is healed or ameliorated. 
Overall, we introduce new methods of healing a dynam- 
ical system that is performing a task. 


1. Introduction 


Recent research has shown how adversarial elec- 
tronic interactions can disable systems. Insulin injec- 
tors have been sabotaged so that the spurious reporting 
of the insulin level erratically turns off and on the flow 
of insulin [1]. Electronically sabotaged pacemakers 
can produce dangerous shock commands [2]. Injecting 
clock glitches can skip cryptographic instructions [3]. 

Out-of-band signal injection attacks alter the 
measurements of sensors or actuator inputs at the hard- 
ware layer [4]. These attacks target the conversion 
process from a physical quantity to an analog property. 

Typically, hardware attacks sabotage the intended 
dynamical behavior of the electronics. Moreover, 
there are currently no general mathematical models for 
describing how an extreme electromagnetic injection 
(EEMI) attack propagates in electronic components [5]. 

Current flip-flops are electronic circuits that have 
two stable physical states which can store information 
(0 or 1). A flip-flop’s state is changed when signals are 
applied to one or more of its control inputs. Flip-flops 
are fundamental storage elements in sequential logic. 

Fig. 1 shows a D flip-flop circuit, composed of four 
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Fig. 1. D Flip-Flop Circuit 


NAND gates and one NOT gate. CLK is the clock input. 
D(#) is the data input value (0 or 1) of the D flip-flop at 
time t. At time ¢, Q(t) is an output state (0 or 1), and 
Q(t) = 1 — Q(t) is an output state too. 


Table 1: D Flip-flop Logic 


Time CLK D(t) 
t Rising Edge 0 
t Rising Edge 1 
t Non-Rising {0,1} 


Table 1 shows a D flip-flop’s logic. According to 
row 3, if CLK is a non-rising edge at time ¢, then output 
state Q(t + 1) at time t + 1 stays the same as Q(t). 
According to rows | and 2, if CLK is a rising edge at 
time t, then the next output state Q(t + 1) at t+ 1 is set 
to the current value of the data input D(t). If D(t) = q, 
then output state Q(t + 1) is set to g, where q is 0 or I. 

D flip-flops are commonly used in digital electronics 
to build computers and communication systems. Hence, 
our research focuses on a differential equations model 
of a D flip-flop. Our primary contribution applies a 
principle of self-modifiability to differential equations in 
order to stabilize a D flip-flop during a noise attack. A 
software simulation of the model is provided. Another 
contribution introduces meta variables as a new tool for 
detecting if a flip-flop orbit has been manipulated. Meta 
variables and meta operators can heal a flip-flop orbit 
disrupted by noise. Overall, new mathematical methods 
that heal a dynamical system are introduced. 
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2. Related Work 


A differential equations model of a D flip-flop gate 
was proposed in [5], and was derived from a model in 
[6]. An experimental test circuit in [6] facilitated accu- 
rate and reproducible measurements of [6]’s model of 
flip-flops, built with CMOS [7] ASIC technology. The 
model in [5] is a starting point for our results. In [5, 6], 
they do not propose a self-modifiable dynamical system, 
nor error-correction for flip-flop circuits. 

In [8], soft error code correction in flip-flops 
addresses errors due to neutrons generated from cosmic 
rays and alpha particles from packaging material. In 
[8], they do not address active electromagnetic attacks 
by Mallory, and self-modifiability is not used. 

Self-modifiable machine instructions originated in 
[9, 10, 11]. In [12], a principle of self-modifiability and 
self-modifiable differential equations were first intro- 
duced. In [13, 14], hybrid systems use automata 
combined with differential equations to model complex 
processes. Hybrid systems do not have a notion of self- 
modifiability, nor variable spaces, nor meta operators 
that can dynamically add new variables and equations. 

DNA repair has been extensively studied for over 
fifty years. DNA models explain repair at a biomolec- 
ular level [15]. Organisms have repaired their DNA for 
perhaps a few billion years.! Biomolecular DNA models 
do not propose self-modifiable differential equations. 

“Self-modifying systems” were proposed for under- 
standing the development of complexity in biology [16]. 
However, the mathematics described in [16] doesn’t 
actually self-modify: e.g., there is no formalism for 
adding new variables and equations as time proceeds. 
Moreover, Turing machines are described in [16]’s “self- 
modifying systems”, even though the rules governing a 
Turing machine program stay fixed. 


3. AD Flip Flop Gate Model 


A D flip-flop gate model? [5] is reviewed and 
explained. Fig. 2 shows a vector field of the model, 
generated by Julia’s plotting software [19]. The vector 
field is plotted on a subset [—2, 2] x [—2, 2] of R?. 

In Fig. 2, fixed points? a = (1, —1) and b = (-1,1) 
represent two stable states* that this D flip-flop model 


! Archaeans, single-celled microorganisms, have been detected in 
shales dating from 2.7 billion years ago. 

? According to Dr. Valbuena [17], his model is based on an elec- 
tromechanical D flip-flop so that orbits can be measured. Model 
constants can be selected to match the experimental data in [6] with 
high accuracy. An electromechanical D flip-flop was built because his 
calculations predicted that measurements, of acommercial D flip-flop, 
would occur over extremely small time horizons (picoseconds) [18]. 

3 Sometimes fixed points are called equilibrium points. 

4Q(t) and Q(t) correspond to the Ist and 2nd coordinates of the 
fixed point: bit 0 ++ —1 and bit 1 + 1. In table 1, D(¢) is O or 1. 


can reach. The rest of this section defines the differential 
equations that produce the vector field in Fig. 2. 


eae 


U2 0 


ele ff 


Fig. 2. D flip-flop vector field (%4, dae ) 

Let c, d and Lp be constants that are real numbers. 
For a fixed point p = (pi, p2) in the square {(x,y) € 
R? : —2 < 2, y < 2} and any point u = (ui, uz) € R?, 
define metric ||p — ul|? = (p, — ui)? + (pe — us)?. 
Define a radially symmetric function centered at p as 


Lp(u) - 


~ 14 edlip—ull?—a" 
a differential equation (1) flip-flop model. (In sections 4 
and 5, signal input and noise are added to the model.) 


Function L,,(w) helps define 


du _ Batil) i eo 


da sina 


ey mee 


u) cosa(u) 


- ie bay 


cos 3(u) 
Ly(u) ( ) cos B(w) 


( 
sin B(u 


a(u) and 3(u) have two favorable properties: 


e Angles a(u) and G(u) are smooth functions of u near 
the stable manifold ug = wu, that separates the basins of 
attraction of stable fixed points a and b. 


e Angle functions a(u) and 6(u) help realistically 
model flip-flop behavior measured in hardware. 


The rest of this section defines functions that help 
build a(w) and 6(u). ga and gp are constructed from 
fixed points A = (a1, a2), B = (61, ba), and constant x. 
For u = (u1, U2), define g4(u) = +4 tanh(u;—Ka1), 
and define gp(u) = 4 — 4 tanh(u; — by). 

For u = (u1, uz) and fixed point p = (p1, p2), define 
Z(p,u) = atan2(p2 — uz, py — U1).° Recall that 

5Z(p, uw) computes the angle between the z-axis and the vector 
p— t, where p = (pi, p2) and & = (ut, u2). 
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arctan(y/x) ifx >0 

arctan(y/x)+a ifa<Oand y>0 
arctan(y/x)—a ifa<Oandy <0 
a/2 if =Oand y>0 
—n/2 if =Oand y <0 
undefined if =Oand y=0 


Define ¢p(u) = —F tanh(uz). Define y(u) = 7 — 
op(u). Define ¢4(u) = atan2 (sin 7(w), cos y(u)). 


Define a(u) = $ ga(u) (¢a(u) — Z(A,u)). 


i 
2 
Define 6(u) = 4 gp(u) (dp(u) — Z(B,u)). 
Constants c = 0.8, d = 1, Lop = 2, and k = 3, 
and fixed points a = (1,—1) and b = (—1,1) gener- 
ated the vector field shown in Fig. 2. These constants 
were chosen, based on software simulations [19] of the 
model; some graphs and figures in [5] based on phys- 
ical measurements from a electromechanical D flip-flop 
built in a lab [18]; and email communications [17]. 
For all values c in interval [0.8, 1.3], d in [0.4, 1.2], 
Lo in [1,3], and « in [3, 00), the vector field, in equation 
(1), “stays qualitatively close to the vector field” in Fig. 
2: stable fixed points a and b do not move or vanish, 
and the two basins of attraction are separated by the line 
U2 = uy. At values c $; d z, Lo = 2, k = 3, fixed 
points a and 8, on opposite sides of w2 = uy, vanish: a 
1 


bifurcation occurs near c = 3 


atan2(y,x) = 


4. Adding Input to the Model 


Fig. 2 shows a vector field of the D flip-flop model 
that has two stable outputs. In one output, a flip-flop’s 
orbit reaches the attracting fixed point at b = (—1, 1); in 
the second output state, the orbit reaches the attracting 
fixed point a = (1,—1). For example, the first coordi- 
nate of b can represent a logical 0 bit; the first coordinate 
of a can represent a logical | bit. 

For wu = (uy, Ug), line uz = uy is a boundary of the 
system of equations, defined in equation (1), because it 
separates initial points u(0) that eventually reach fixed 
point a = (1, —1) and points that eventually reach fixed 
point b = (—1, 1).° For all initial points u(0) = (xo, yo) 
satisfying xg < Yo, the orbit of u(0) converges to b = 
(—1, 1). For all points u(0) = (0, yo) satisfying 7p > 
yo, the orbit of u(0) converges to a = (1, —1). 

We add input signal Z(t) with constants kK, Ko: 


du cosa(u) —sina(u) 

ak = La(u) ae ee Jaw) + Lp(u) 
cosB(u) —sinB(u)\ KG 

Gas cos B(u) Jo ea ( re) EO (2) 


6Tn electronics, u2 = u1 is sometimes called a wall; in dynamical 
systems, w2 = uz is a stable manifold with saddle fixed point (0, 0). 


An example of Z(t) is defined that illustrates 
how the input signal can toggle the flip-flop between 
fixed points a = (1,—1) and b = (-1,1). For 
parameters To, period p and pulse width 7, define 
r(t,To, pe) = (t -— To) mod p. Define w(t, To, p,7) = 
‘ if r(t, To, p) < 7 and |(t — To)/p| is even. 

—1 ifr(t,To,p) < rand |(t — To)/p| is odd. 
0 if r(t, To, p) a 


T(t) = W(t, 16, 24, 1.8) is shown in Fig. 3.’ 


1 


0 16 40 64 


Fig. 3. Input Signal Z(t). Tp = 16. p = 24.7 = 1.8. 


4.1. A Toggled Flip-Flop Orbit 


Fig. 4 shows an orbit of the flip-flop model with 
initial point u(0) = (—1.7,0.8) during the time period 
T = [0,17.8]. During u(t)’s entire orbit, the constant 
values are K, = 0.6, Kp = —1.5, Typ = 16, period 
p = 24, and width 7 = 1.8. Input signal Z(t) = 
w(t, 16, 24, 1.8), where Z(16) = 1. See Fig. 3. 


1.0 u(16) 
0.5 
0.0 


-0.5 
u(17.8) 


-1.5 -1.0 -0.5 0.0 
Fig. 4. Orbit of u(0) = (—1.7,0.8). IT = [0, 17.8]. 


Point u(16) is very close to stable fixed point b = 
(—1,1). Z(t)’s effect on u(t)’s orbit is shown in Fig. 4: 
at time ¢ = 16, the orbit abruptly changes. When Z(t) = 
1, term (Z(t), K2Z(t)) dominates the other terms in 
equation (2) that create the vector field in Fig. 2. During 
time period [16, 17.8], the orbit crosses boundary uz = 
uy, so u(17.8) is in fixed point a’s basin of attraction. 

During time period (17.8, 20], Z(t) = 0. u(t)’s orbit 
follows the vector field in Fig. 2. u(20) is close to fixed 
point a = (1,—1). See Fig. 5. During period [20, 40), 
T(t) = 0, so u(€)’s orbit approaches even closer to a. 


7T(t) is normalized to 1. If an electronic flip-flop operates at 3 
volts, then Z(t) = 1 may correspond to 3 volts. 
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1.0 


0.5 


-1.5 -10 -05 00 05 1.0 


Fig. 5. Orbit of u(0) = (—1.7,0.8). I = [0,20]. 


At time t = 40, Z(40) = —1 so there is an abrupt 
change in the orbit. During time period [40, 41.8], Fig. 
6 shows the orbit has crossed the boundary w2 = wu}. 
Point u(41.8) is in fixed point b’s basin of attraction. 


u(41.8) 


-15 -10 -05 00 05 1.0 


Fig. 6. Orbit of u(0) = (-1.7,0.8). I = (0, 41.8]. 
During period [41.8, 45], Z(t) = 0. 


vector field and approaches b = (— 


u(t) follows Fig. 2’s 
1,1). See Fig. 7. 


19 u(41.8) 


-1.5 -1.0 -05 00 05 1.0 


Fig. 7. Orbit of u(0) = (—1.7,0.8). I = [0,45]. 
We explain how Z(t)’s toggling relates to table 1. 
(A, L(t), KoT(t)) models data input D(t) combined 
with clock input CLK. Q(t) = 0, Q(t) = 1 corresponds 
to b = (—1,1). Q(t) = 1, Q(t) = 0 corresponds to 
= (1,-1). Z(t) = 0 corresponds to row 3 of Table 1. 
L(t) = latt = 16 corresponds to row 2, where Q(t+1) 
is set to 1, as u(20) ~ a.8 Z(40) = —1 corresponds to 


8Q(t + 1)’s time scale is distinct from u(t)’s time scale. 


row 1, where Q(t + 1) is set to 0, as u(t) is toggled to b. 

If input constants K1, K2 are too small, then |K;| 
and |/<2| must be substantially different. When |ky| 
and || are small and |Ki| ~ |Ko|, u(t)’s orbit 
cannot be successfully toggled from one fixed point to 
the other fixed point because the vector field is close 
to zero near the saddle point (0,0). When kK, = 0.6, 
Ky = —0.6, c = 0.8,d = 1, Lo = 2, % = 3 with 
u(0) = (—1.7,0.8) as in Figs. 4-7, and 7 = 1.8 then 
u(17.8) ~ (—0.484, 0.492). The flip-flop’s orbit does 
not cross the boundary w2 = wy, and returns to fixed 
point b by time t = 24. Keeping the other constants 
the same, when K, = 1.5 and Ko = —1.5 with 
u(0) = (—1.7,0.8), then u(17.8) = (1.47, —1.47), so 
the orbit successfully crosses boundary ug = wu. 

Successful toggling depends upon time width 7 of 
input Z(t). For example, when Ky = 1.5 and K2 = 
—1.5 with u(0) = (—1.7,0.8) and 7 = 1, the orbit 
successfully crosses the boundary w2 = wu ,. When 
T = 0.8, the orbit does not cross ug = uj, and by time 
t = 24, u(24) = (—0.986, 0.987) = b. 


5. Noise Can Disrupt Flip-Flop Toggling 


A noise pulse can disrupt flip-flop toggling. Noise 
term 7(t) is added to equation (2). K3, A4 are constants. 


du sa(u) —sina(u) 
dt La(u) ene - a(u) (a ay 
os B(u) —sin B(u) 
Eo(u) oe see Jo-w + 


(tO + (FE) o 


Set h(t,l, f) = sin (Qrf(t _ i). Set g(t,1,6,k) = 
tanh(k(t — 1)) + tanh(—k(t — 1+ 6)). See Fig. 8. 


1 


0 8 16 24 32 


Fig. 8. h(t, 32, 5) is magenta. g(t, 3, 1,5) is a pulse. 
Set x(t, 1, f,6,k, A) = A * g(t, 1,6, : ee tl if). 

Fig. 9 shows an instance of (t) = x(t, 33, 3 1, 2). 

In Fig. 9, = a is the time location of the noise. Ve 

is the frequency of function h. 6 = 1 is the time width 

of function g. Constant is = 5 sets the steepness of g on 

each side of time 1. A = = 3 is the amplitude. 
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0 8 16 24 32 
Fig. 9. Noise n(t) = x(t, 2, $,1,5, 3) 


Figs. 10 and 11 show a noise injection on u(t) = 
(ui(t), u2(t)) where K3 = 0 and Ky = 1.0. Input Z(t) 
=~ U(t, 16,24, 1.8). Noise n(t) = x(t, 8, 3,1, 5,3) 
disrupts ne )’s orbit during time period [14.5, 17.5].? 


-1.5 -10 -0.5 


Fig. 10. Noise orbit u(0) = (—1.7, 0.8). P = [0, 17.8]. 
Fig. 10 shows the effect on u(0) = (—1.7,0.8)’s 
orbit. u(17.8) still lies in fixed point b’s basin of attrac- 
tion. Compare Figs. 10 and 4. 
During period [17.8, 24], Fig. 11 shows that u(0)’s 
orbit converges to fixed point b = (—1,1). Noise 7(¢), 


in Fig. 9, has disrupted Z(t)’s flip-flop toggling. 


0.0 


-15 -1.0 -0.5 


Fig. 11. Noise orbit u(0) = (—1.7, 0.8). F = (0, 24]. 


6. Gate Model Assumptions 


In our model, Alice’s goal is to hinder Mallory from 
sabotaging Alice’s flip-flop computation. Assumptions 
about Mallory’s sabotaging with noise are described 
after a comprehensive description of our extended 
model. Some of these assumptions defer hardware 
implementations to a subsequent paper. 


°\n(t)| < 10—19 whenever t lies in [0, 14.5) U (17.5, +00). 


7. Adding Healing Variables 


When a simulated EEMI attacks the D flip-flop 
model, an effective attack creates enough noise for a 
long enough period of time so that the orbit is corrupted 
with respect to the boundary w2 = u,. The noise causes 
the output of the flip-flop to compute the incorrect value. 
A primary goal is to explore mathematical methods of 
healing a disrupted flip-flop orbit, since hardware imple- 
mentations are beyond the scope of this paper. 

An information theory [20] analogy is helpful in 
explaining our approach. Suppose Alice transmits 16 
bits of signal to Bob. If any of the 16 bits are flipped due 
to noise in the transmission medium, Bob has no way of 
knowing if any of the bits have been flipped. To repair 
errors, Alice must transmit additional bits that help Bob 
with error code correction [21]. 

Similar to error correction, an extension of equation 
(3) adds new variables that heal the flip-flop orbit when 
it is disrupted by noise. Set v,(t) = (u(t), ua(t)). 
For i > 2, set y(t) = (uai-1(t), uai(t)). Define n 


differential equations, where each 7 is in 1,..., 7: 
dy, cosa;(vy;) —sina;(Vj) 
dt Pa(%) S ai(Yyi) cosa; (%) (a-v%) + 
cos 8;(4%4) —sin 6; (1%) ay 
Lov) Ge cos 3; (1%) pa) + 


(Fen) 2+ (FE) me 
Analogous to a(u) and 6(u) in section 3, angles a; and 
{1 are computed between the two vectors derived from 
u; and ug. If i > 2, angles a; and 3; are computed 
between the two vectors derived from w2;_; and w9;. 

When n = 2, two new variables us, u4 and two more 
standard differential equations are added to the system. 
System u(t) = (ui(t), w(t), u3(t), w4(t)) is subject to 
equation (4). Set boundary conditions u;(0) = u3(0) 
and w2(0) = w4(0). Set input constants Ay) = Koi = 
0.6, and Ki2 = Ko2 = —1.5. Set noise constants 
Ki3 = ko3 = Ko = 0, and Kia = 1, 

Both 1(t) and v2(t) have the same stable fixed 
points a = (a1,a2) and b = (b),b2). Hence, if noise 
injection does not occur, then the orbits of 1(¢) and 
V2(t) are identical: 1;(t) = v(t) for all t. 

Assume wu; and wg “perform the computation’. w 
and wz are called signal variables. uz and u4 are called 


repair or healing variables." For each i in {1, 2}, define 
ta differential tions: a th 
meta differential equations: —— FT “Hw 


initial conditions w (0) = w2(0) = 0. w; and wy are 


10Variables ug and ua are analogous to error correction bits. 
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meta variables. Define two thresholds 6,,02 > 0 and 
two meta operator execution times s1, $9.1! 
Let s, be the first time, where |w,(s)| > 61. Then 


ss =int {rz 03] f (48 — )al > 0} (*) 


If s exists, at time s; a meta operator M, bound to w; 
executes: MM, modifies Ba. =... in equation (4). 
Let s2 be the soonest frie such that |wo(s2)| > Oo. 


= 


se=int fro] f (4 2) al > 9} (x) 


0 


If sg exists, then at time s2 meta operator M2 bound to 
Wp, executes: My modifies die =... in equation (4). 


Meta operator 1 is defines below. 


Meta Operator 1. = Lock Variables uy, u2 
at |w1(s1)| > 6, OR |w2(s2)| > O2 
for i in {1,2} { 
(ui(si),ua(si)) is the current point. 


set Mi (ur, U2, s)=0 for s€ [si,5; + Oi]. 

Set 6; = 02 = 0.01. Fig. 12 shows (u 1, w2)’s orbit 
when meta operator | is bound to w2 and 62. Fig. 4 
shows (u3(t), ua(t))’s orbit.!* In meta operator 1, vari- 
ables ug and u4 lock (uw, w2)’s orbit near fixed point b. 
If there is an AND gate to compare to (u3, u4), the result 
can detect a noise injection on (uy, ua). 


1.0 
0.9 —— 
0.8 

-17 15 -1.0 


Fig. 12. Meta Procedure 1. u(0) = 
(0, 17.8]. Noise orbit of (w1, uz). 


(—1.7,0.8).T = 


Variables (u3, u4) help heal an attack on (uy, U2). 


Meta Operator 2. — Self-Modify Vector Field 


if lui(si)/ >A { 
(ui(si),u2(si)) is the current point. 


for all s>s8, such that |wi(s)| > 61: 


u 
— 3 (1, ua, 8). 


dui 
set ——(u1,U2,8) = ai 


dt 


'lMeta variables and meta operators are more comprehensively 

defined in the appendix. Section 10.1 defines a detectable event. Set 
d d 

Ci = (—00, —4;| U[6;, co) for é in {1, 2}. Set f(w, a t) = = 
X = R. Then (*) and (**) satisfy condition (***), defined in 10.1. 

? (ui (t), ua(t))’s orbit is the same as Fig. 4 when there is no noise. 


ale |w2(s2)| > O2 { 
(ui(s2),u2(s2)) is the current point. 


for all s>s8g such that |woe(s)| > 62: 


U1, U2, 8). 


dua 
a 


set U1, U2, 8) = 


U2 
es 
In a simulation of meta operator 2, the same noise 
injection is used as section 5 that caused the flip- 
flop toggling to fail (Fig. 11). The noise constants 
are ky3 = 0; Kia = 1, and Ko 3 = Koa = 
0. During time Lenod [16, 17.8], noise pulse 7(t) = 
x(t, 33 5,1,5, 3), shown in Fig. 9, attempts to disrupt 
Ug’s orbit when input signal Z(t) = w(t, 16, 24, 1.8). 
Fig. 13 shows that meta operator 2 with 6; = 62 = 
0.2 successfully heals this noise injection in variable wo. 
By t = 24, the orbit (w(t), u2(t)) successfully toggles 
and reaches a = (1, —1). Compare Figs. 13 and 11. 


1.0 
0.5 
0.0 
-0.5 
-1.0 


-17 -1.0 0.0 1.0 


Fig. 13. Horizontal axis: u,. Vertical axis: uo. 
Meta Operator 2. 6; = 02 = 0.2. T = [0, 24]. 


Observe that Ko 3 = K24 = 0, so healing variables 
ug, U4 are not attacked with noise. Also, Ky4 = 1, so 
variable uz is disrupted by noise near t = 16.!° 

If the thresholds are set to 0} = 62 = 1 and the 
time width 6 of 7(t) is set to 1.4, then meta operator 2 
no longer can heal the noise disruption. For these same 
values, 0; = 62 = 1 and 6 = 1.4, if width 7 of Z(t) 
increases from 1.8 to 2.0, then meta operator 2 success- 
fully heals the stronger noise injection, even with very 
weak thresholds 6; = 62 = 1. There are two effects. 
Meta operator 2 heals ug’s orbit at t ~ 15.63. The 
second effect is that 7(t) is effectively 0 after t = 17, 
and Z(t) = 1 until t = 18. See Fig. 14. 

Consider that meta variables w ,w2 integrate the 
difference between variables w1, wz and ue, us, respec- 
tively: he = dita ae where 7 is 1 or 2. If 
|wo| > 02 = 1, fie |w2 — ua] > 1. This means it is 
likely that the (ui, uz) and (ug, u4) orbits are on oppo- 
site sides of the line ug = uz, implying that u2’s orbit 
was disrupted from its correct orbit. 


'3Tn Fig. 9, the peak of pulse 7(t) is near t = 16. The peak ampli- 
tude of noise pulse 7(t) is over 5 times larger than the peak amplitude 
of the noise pulses, used by [5] in figure 6b. 
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12 14 16 18 20 
Fig. 14. Z(t) is green. 7 = 2. n(t) is magenta. 6 = 1.4 
Meta operator 3 increases the pulse width of Z(t). 


Self-Modify Input Signal 
if |w1(s1)| > 6, OR |w2(s2)| > O2 


Meta Operator 3. 


increase pulse width +r of input T(t) 


Meta operator 4 combines meta operators 2 and 3. 


Meta Operator 4. = Heal 


Operator 2 changes the vector field. 
Operator 3 changes the input signal. 


if |wi(si)| > O1 
execute $1 parts of Operators 2 & 3 


LF |w2(s2)| > O2 
execute sg parts of Operators 2 & 3 


8. Decentralizing Healing Variables 


In this section, the role of each variable is decentral- 
ized over time. A noise injection only lasts for a short 
period of time.'* Decentralization of a task between 
variables addresses the weakness that a sophisticated 
Mallory will attempt to attack the weakest part of the 
system. Hence, in meta operators 1, 2, 3 and 4, if 
Mallory knows or guesses which variables perform the 
healing, Mallory will likely attack the healing variables. 

To address this single point (variable) of failure, the 
variables should heal each other in one or more vari- 
able cycles. Decentralization enables each variable to 
have a dual purpose: signal and healing. After showing 
how meta operator 2 fails on a noise attack on its healing 
variable, meta operator 5 is defined that is more robust 
to noise. Lastly, we explain variable cyclicity and how 
changes in the noise parameters and number of variables 
affects the efficacy of meta operator 5. 

A noise attack on meta operator 2 is examined. 
A successful attack provides an example that demon- 
strates the intuition of Mallory attacking the healing 
variable. Fig. 15 shows two noise pulses 72(t) = 
x(t, 1, f,62,k,A). and 73(t) = x(t,1, f,63,k, A) with 


'4The case, when the noise is generated for the duration of the 
whole computation, is not addressed: this is analogous to physically 
destroying a computer. A priority is to hinder Mallory from manip- 
ulating the computation to do something that benefits Mallory: e.g., 
flipping a bit in a flip-flop to subvert a cryptography algorithm. 


3 

2 

1 1 

oe 1) 

8 16 24 8 16 24 

Fig. 15. Two Noise Pulses 7);(t) 


SS 


parameters | 8, f + dg 3 63 = 1,k = 5, and 

A= 3. In Fig. 15, 72 is magenta; 773 is the larger pulse. 
Fig. 16 shows 72, 73 attacking variables ug, wa, 

respectively. Meta operator 2 fails with 0; = 02 = 0.2. 


1.5 
1.0 
0.5 


0.0 
=“L70 =1.00 =—0.25 


Fig. 16. Horizontal axis: u;. Vertical axis: ug. 
Meta Operator 2 Fails. Variables u2, u4 attacked. 


To address the failure of meta operator 2 when both 
Ug and u4 are attacked, an example is extended to six 
variables (u1, U2, U3, U4, Us, Ue). In equation (4), i = 
1,2, or 3. Similar to section 7, set K,1 = Kay = 
34 = 0.6 and Ki Ko K3.2 —1.5, so the 
same constants are used with input Z(t). 

Define meta variables so that the signal and healing 
are decentralized over the variables. Let wy, we, and ws 
be the meta variables with initial conditions w,(0) = 
w2(0) = w3(0) = 0. All 3 thresholds are equal, so just 
use 9. Meta operator 5 depends upon 3 meta variable 


, dw du, dug duwy dug dua 
equations: = : a : 


dt dt dt ° 
Meta Operator 5. = Decentralized Variables 
if jwi(si))/>0@ AND |w3 83) >@ 


dua 1 dua dug 
( dt dt ). 
if |wi(si)|>0 AND |we(se)| > 0 
dua _1/du2 . due 
( dt dt ). 
if |we(s2)| > AND |w3(s3)| > 0 
dug 1 duz du4 
dt =35( dt | dt ). 


Fig. 17 shows that meta operator 5 successfully heals 
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the orbit on the same two pulse (Fig. 15) noise attack 
that caused meta operator 2 to fail (Fig. 16).'° 


1.0 


-17 = -1.0 0.0 1.0 


Fig. 17. Horizontal axis: w;. Vertical axis: ua. 
Meta Operator 5 Succeeds. 


Variables uz, u4, and ug have cyclic interdependen- 
: dug . dua 
cies. In meta operator 5, 7? depends upon wa, ug; * 


. du 16 
depends upon uz, ug; and “7% depends upon wa, wa. 


Intuitively, when noise 73 attacks u4, u2 and u¢ 
restore u4. When 7 attacks we, then u4 and ug still 
agree so they can heal uw. Depending upon the time, ue, 
ua, and ug play different roles. This is why six variables 
can ameliorate a two pulse attack on ug and w4. 

Keeping 73’s parameters fixed, if d2 lies in (5, =], 
meta operator 5 successfully heals the noise. When 62 = 
0.76 and 6; = 6) = 0.2, a bifurcation!’ is about to 
occur. See Fig. 18. Operator 5 fails at 62 > 0.77. 


15 
1.0 
0.5 
0.0+ 
-0.5: 


-1.01., 
=1.7 =1:0 0.0 1.0 


Fig. 18. Horizontal axis: u;. Vertical axis: ue. 
Meta Operator 5 Succeeds. 62 = 0.76 


The relative timing of noise pulses is also critical. 
If pulses 72 and 73 are separated in time, operator 5 is 
far more robust: when d2 = 1, and 79’s time location 
l= a, meta operator 5 successfully heals the noise, as 
shown on the left side of Fig. 19." 

As the number of variables n increases beyond 8, 
there are more potential variable interdependencies that 


'5Tn the simulations of Fig. 16 and Fig. 17, noise constants Ky ,3 = 
Ko,3 = Oand Ky,4 = Ko 4 = 1. 

!6Tf variable y depends upon variable x, write 2 + y. From the 3 
equations, there are six variable 2-cycles: all u; - uj; — uj; such 
that i A j and {2,7} C {2,4,6}. There are six variable 3-cycles: all 
Uji —> Uj —> UZ — U; Such that sets {i, j,k} = {2, 4, 6}. 

'7 4 bifurcation occurs when the orbit does not cross wg = U1. 

'8Per footnote 7, the peak amplitudes of 2, 73 correspond to 9 
volts, which is substantially above a typical range of 1.2 to 5 volts for 
commercial flip-flops, yet meta operator 5 still heals the orbit. 


-1.7 -1.0 0.0 1.0 8 16 20 28 


Fig. 19. Meta Operator 5 Succeeds. d2 = 63 = 1 


can create robust healing. If n > 8, noise attacks require 
more pulses on multiple variables.!? Also, it is far more 
challenging for Mallory to inject noise pulses so that on 
multiple variables their time locations overlap. 


9. A Hardware Gedankenexperiment 


A gedankenexperiment is proposed that tests feasi- 
bility of building meta operator 2. *° Imagine two copies 
C; and C> of the flip-flop circuit in Fig. 1. Data input 
lines D(t) and clock inputs CLK are the same for C1 
and Cp. Let Q;(t) and Q;(t) be the two outputs of C;, 
iin {1,2}. There is an additional circuit S' that receives 
D(t), CLK, Qi(t), Qi(t), Qo(t), and Qo(t) as inputs. 
Q(t) and Q,(t) correspond to signal variables u; and 
ug. Qo(t) and Qo(t) correspond to healing variables u3 
and u4. C; also receives outputs from S. 

Meta operator 2’s definition describes how S 
should behave. For i in {1,2}, S should compute 
dw; duj+2 du; 

dt — dt dt ° 
exceeded, then S' sends output that self-modifies circuit 
C,. The final part of a gedankenexperiment tests under 
what conditions S' can self-modify C so that a noise 
injection doesn’t disrupt C’;’s orbit, per section 7. 


If thresholds 6; or 62 are 


10. Summary & Research Questions 


A previously proposed differential equation model 
of a D flip-flop was our starting point. A noise attack 
was demonstrated that can disrupt a flip-flop orbit. Meta 
variables and meta operators were introduced as a math- 
ematical tool for building self-modifiable differential 
equations. We showed how meta operators can heal 
a flip-flop orbit, disrupted by a noise injection, and 
identified that signal functionality and healing should 
be decentralized over standard and meta variables. A 
gedankenexperiment was proposed on how to build a 
meta operator that can self-modify a circuit. 


!9This means Mallory requires more energy. 


20Tf meta operator 2 is feasible in hardware, then we predict that the 
implementation can be extended to more elaborate meta operators. 
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In digital hardware design and theoretical computer 
science, the final result of a computation is a fixed point. 
After a Turing machine halts [22], the final result is 
the machine’s state and symbols stored on the tape. A 
Turing machine’s halting configuration is represented by 
a fixed point. (See pages 390-392 in [11].) 

Fixed points are simpler objects in dynamical 
systems theory. Besides fixed points, nonlinear systems 
can have periodic orbits, limit cycles, dense orbits, and 
chaotic attractors. It is unknown whether chaotic attrac- 
tors can help build self-modifiability that is resistant to 
attacks. It is also unknown what role quantum physics 
can play in building self-modifiable dynamical systems. 

Future research should explore these questions: 

e Can self-modifiable differential equations be imple- 
mented in electronics? Can a hardware flip-flop be built 
that self-modifies to hinder noise attacks? 

e Can a chaotic attractor decentralize signal and 
healing among multiple variables? 

e Can bifurcation theory provide insight on how to 
design new meta operators? 

e Can quantum entanglement help self-modify a 
quantum dynamical system? 
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Appendix 


The appendix describes self-modifiable differential 
equations that can add new variables and new equations. 
Two notions are fundamental: 

1. A formal language specifies how to self-modify a 
differential equation with meta operators. 
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2. A meta variable helps detect an event. A detectable 
event triggers an execution of a meta operator. A 
meta operator alone is not sufficient for defining self- 
modifiability. A self-modifiable dynamical system must 
also know at what time a meta operator executes. 


10.1. Meta Variables 


A meta variable, a physically detectable event, and 
a meta execution time are defined. Standard vari- 
ables are variables that occur in an ordinary or partial 
differential equation. x and ¢ are standard variables in 


2 92 
ine) =| he Oo 


+ V(x, t)| U(a,t). 


Ot 2m Ox? 
W1,..-Wpy represent meta variables, and w1,...,Un 
‘ dw; . 
are standard variables.?! a = fi(u1, ...,Un) is a 


meta equation, where each f; is a function. 

Let X be a measurable [23], topological space [24], 
where derivatives exist. At time t, a standard variable’s 
value u;(t) and a meta variable’s value w;(t) both lie 
in X. Let f : X x X x [0,00) — X be a function, 
where f’s arguments are w(t), the and t, respectively. 
Call C C X a detectable set. A physically detectable 


event occurs if 


t=s 

d 
co a t) dt liesin C attime s. (A) 
t=0 


Define meta execution time T., as the infimum? of all 
times s that satisfy (***). A meta operator M,,, bound 
to meta variable w, executes at time 7,,. 


10.2. Meta Operators 


Meta operators help build self-modifiable differen- 
tial equations. A system is a set of differential equa- 
tions, e.g., S = {#4 = 0, ie = 0, dis =u, + U2 
U1 U2 —us}. Create operator C creates an empty system, 
and assigns a name with syntax C(t ime, name). C(0,S) 
creates an empty system S = {} at time 0. 

Initialize operator I declares a variable with a 
name and its type; assigns an initial value; and places 
the variable in a system. Z’s syntax is Z(time, 
variable_name, variable_type, initial_value, 
system_name). For example, Z(0,u,;, standard, 0, 
S) creates u; at time 0; defines u; as a standard variable; 
and assigns u, the initial value of 0 (i.e., u;(0) = 0). 
Argument S places variable wu; in system S. 

Adjoin operator A adjoins a new differential equa- 
tion to a system. A’s syntax is A(time, equation, 


2! Variables have type standard or type meta. 
?2The infimum of a set of real numbers is the greatest lower bound. 


system_name). A is executed at a time specified by the 
first argument. In some cases, t ime is explicitly stated. 
In other cases, t ime is the greatest lower bound of all 
times s which satisfy condition (***) in section 10.1. 
For example, execute 7 meta operators shown below: 


C(-1, S)  Z(0,u1, standard, 0, S) 

A(0, 44 = 0,S) L(0, uz, standard, 0, S) 

A(0, 42 = 0,8) L(0, ug, standard, 0, S) 

A(0, 48 = uy +uz—uU2—Uus, 8). Afterward, system 
S = {% = 0, dia = 0, Hs = uy + Ug — Uy U2 — U3}. 


Replace operator R replaces a variable with an 
equation or variable, or 7 replaces an equation with 
another equation. #’s syntax is R(time, old_exp, 
new_exp, grammar, system_name). The argument 
time behaves the same as time in the adjoin operator. 
Sometimes the 2nd argument old_exp represents the 
current variable that will be replaced by a new variable 
or equation, indicated by the 3rd argument new_exp. 
Sometimes old_exp represents an equation that will be 
replaced by a new equation new_exp. The 4th argument 
grammar is a pattern matching scheme. For replacement 
to occur, an expression in old_exp, must be accepted 
by a grammar, specified in grammar. It may be a semi- 
Thue grammar [25].2> If grammar is @ or omitted, a 
replacement occurs at time specified by time. 


10.3. Variable Spaces 


Meta operators can remove and add variables to 
equations. Variables spaces specify how meta opera- 
tors add new variables or remove variables. Variable 
spaces are useful when they create a new variable, by 
measuring a quantum random event [26], which can 
help self-modifiable differential equations evolve and 
increase their complexity as time proceeds. 

Let N, R and R2° be the counting, real numbers and 
non-negative reals, respectively. Define variable space 
V = {u1,Ue2,..-,Un,.-.} in order to add a new stan- 
dard variable wu; to a differential equation. Define dual 
variable space V = {U; : i € N} to remove an existing 
standard variable u; in V from an equation. 2 is the 
empty variable.74 Set W = {A} UVUV. 

Define a variable operator ® : R2° —+ W that adds 
or removes variables from a system S. If ®(t;) = uj, 
then meta operator Z(t;, ®(t;), standard, 0, S) adds 
standard variable u; to system S if u; doesn’t already 
exist in S. For our purposes, a system is a set of ordinary 
or partial differential equations. For some systems that 
represent a physical model, a restriction can be placed 
on ®: e.g., {fr € R2° : ®(r) € VUYV} is countable. 


23 Also, see pages 220-223 in [27]. 
24 is an analog of empty string € in formal language theory [27]. 
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